Online Birth Certificate Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
7e9852e1ba3b10ed9809857eace8d6e330d1f9d7306d8b2d80c0851d85229f86# Exploit Title: Online Birth Certificate Management System - Stored Cross-Site Scripting (XSS)
# Google Dork: N/A
# Date: 2022-9-27
# Exploit Author: yousef alraddadi - https://twitter.com/y0usef_11
# Vendor Homepage: https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/OBCMS.zip
# Tested on: windows 11 - XAMPP
# CVE : N/A
# Version: 1.0
Vulnerability Details
======================
Steps :
1) Log in to the application after register new user
Username: test
Password: 12345
2) Navigate to Birth Reg Form and Click on Add Details.
3) add full name payload => <script>alert(document.cookie);</script>
4) and all field enter payload only Contact Number enter number